Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File:                     BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier:          BN/JDA89JJhMmafLBaowg4zPd+AbK3JmEbe57c/RFzU=
Subject key identifier:   5A:9F:FA:BD:A8:AB:61:4C:98:8D:43:E5:6F:0A:72:FD:69:AF:96:DB
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer:       /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial:       01A0024B1E9A80E5C0DC8239EBE087A41922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number:          0CD2
Signing time:             Fri 14 Aug 2026 22:01:12 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:12 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:12 +0000
Files and hashes:         1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: +CNnEAoRLR8TkwOnbiqrGNjOsK3gKFWIb5xvOhra348=)
                          2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:1e:9a:80:e5:c0:dc:82:39:eb:e0:87:a4:19:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
        Validity
            Not Before: Aug 14 22:01:12 2026 GMT
            Not After : Aug 15 22:01:12 2026 GMT
        Subject: CN=5a9ffabda8ab614c988d43e56f0a72fd69af96db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:8a:30:fe:c3:8d:2a:b3:7a:a7:54:21:95:
                    ea:c2:28:f6:f7:32:71:ec:f7:f0:61:65:46:b9:ce:
                    bb:b4:42:7f:41:7e:a7:43:2f:22:a2:f4:e6:f5:60:
                    d5:00:0c:1e:ba:a9:d5:f7:0e:12:bc:24:fa:5d:d0:
                    1b:5d:a7:7a:87:77:c5:5a:4c:27:d2:13:bb:8a:de:
                    7b:24:68:92:60:95:15:ff:63:58:1f:07:7d:76:19:
                    76:3e:68:d7:61:d5:2e:b8:3b:9d:d5:b3:6d:e8:44:
                    b4:3c:3e:a6:d6:51:7a:43:b2:13:a1:dc:3e:c1:ba:
                    de:cb:01:80:39:2a:6e:e6:23:16:08:5b:5d:05:c2:
                    67:41:5c:91:13:c8:e4:af:05:41:ec:14:c0:52:b8:
                    a5:9b:c4:63:f7:3e:e7:3f:d4:22:0d:2d:d3:f1:e3:
                    7f:cf:0f:64:e3:17:29:3e:cd:44:f6:06:0b:7f:ea:
                    38:76:a1:0a:64:ea:87:7a:b1:9a:46:80:6e:da:3d:
                    c5:1e:cc:ff:99:b9:e2:43:3e:10:9f:67:ec:8c:3b:
                    f9:62:e2:69:96:5c:48:21:65:58:da:50:9e:6e:df:
                    ee:b9:37:b3:30:1c:b6:8e:2e:7e:da:36:28:f0:24:
                    21:b1:1e:b0:9d:45:16:16:74:14:03:8a:6f:22:ae:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:FA:BD:A8:AB:61:4C:98:8D:43:E5:6F:0A:72:FD:69:AF:96:DB
            X509v3 Authority Key Identifier:
                keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:2d:f8:67:9e:ad:4d:0d:64:69:76:a8:72:d7:aa:cb:17:
         b7:c3:92:9f:61:40:b0:db:70:7e:39:70:b9:af:1c:c6:86:2a:
         97:2f:71:e3:eb:84:23:9d:7a:30:ee:dc:4c:84:da:da:91:7a:
         12:2d:9a:8c:c5:fe:78:35:1a:c8:f1:8a:28:67:80:08:d0:3c:
         ce:5e:37:c2:06:93:59:5c:56:50:e7:f3:55:4e:0a:3e:fd:88:
         9e:89:36:e6:31:98:dd:bc:5c:3f:bd:3a:f2:65:dc:3d:26:e5:
         a2:83:67:e0:1b:11:4c:ff:bc:2b:c2:16:5b:48:33:58:fc:bd:
         ee:70:63:f2:c9:25:84:b3:0f:7c:9e:e1:e0:17:32:22:99:1c:
         d1:17:5d:88:40:b1:b0:1f:23:96:68:f5:9d:a9:bf:1a:22:c1:
         72:6f:0e:54:6c:79:dc:7d:9a:d5:08:27:d4:a5:34:4f:9b:af:
         e7:d3:1e:38:7f:e8:83:9d:28:a1:fe:91:9c:e8:d0:92:2a:77:
         50:a6:65:f5:62:71:53:4b:11:f5:06:d6:20:ec:0e:50:58:06:
         86:85:86:d1:b7:84:67:d3:08:c0:d2:ee:5a:08:29:cc:e3:86:
         ef:0e:a4:60:3d:d9:95:53:61:b4:88:89:5a:c7:40:cd:0a:c8:
         94:a3:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:06 2026 by rpki-client